EdgeOSMAX Router Has Weak Password Vulnerability

Ubiquiti Networks Technology Consulting Shanghai Co. The company's business scope includes: network technology consulting, enterprise management consulting, marketing planning consulting except advertising, investment consulting, international economic information consulting, trade information...

Logic flaw vulnerability in IP Camera of Zhejiang Dahua Corporation Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A logic flaw vulnerability exists in the IP Camera of Zhejiang Dahua Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...

Zhejiang Dahua Technology Co., Ltd. multiple systems have logic flaws vulnerability

Zhejiang Dahua Technology Co., Ltd. is a leading supplier and solution provider of surveillance products. Zhejiang Dahua Technology Co., Ltd. has a logic flaw vulnerability in multiple systems that can be exploited by attackers to obtain sensitive information...

Weak Password Vulnerability in OfficeTen Management System of NetEconomy Technology (Suzhou) Co.

OfficeTen Management System of NetEconomy Technology Suzhou Co., Ltd. is an integrated information system that provides personalized services to customers. A weak password vulnerability exists in the OfficeTen management system of NetEconomy Technology Suzhou Co., Ltd. that can be exploited by...

Extreme cms suffers from SQL injection vulnerability (CNVD-2021-35735)

Extreme cms is an open source web content management system developed by Langfang Extreme Networks Technology Co. Extreme cms SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...

Weak password vulnerability in INFINOVA NVR of Shenzhen Infinova Technology Co.

Infinova is a leading global manufacturer of electronic security products and an industry solutions provider. Ltd. INFINOVA NVR has a weak password vulnerability that can be exploited by attackers to obtain sensitive information...

Denial of Service Vulnerability in CenturyStar Configuration Software (CNVD-2021-35747)

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. is a real-time human-machine interface utility program generator, consisting of the CSMaker development system and CSViewer runtime system, the CSMaker development system is th...

Denial of Service Vulnerability in CenturyStar Configuration Software (CNVD-2021-35746)

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. is a real-time human-machine interface utility program generator, consisting of the CSMaker development system and CSViewer runtime system, the CSMaker development system is th...

Logic Flaw Vulnerability in IP PTZ Domo of Zhejiang Dahua Corporation Technology Co.

Zhejiang Dahua Technology Co., Ltd. is a video-centered intelligent IOT solution provider and operation service provider. A logic flaw vulnerability exists in the IP PTZ Domo of Zhejiang Dahua Technology Company Limited, which can be exploited by attackers to obtain sensitive information...

Shenzhen Infinova Technology Co., Ltd. INFINOVA NVR presence command execution

Infinova is a leading global manufacturer of electronic security products and an industry solutions provider. INFINOVA NVR of Shenzhen Infinova Technology Co., Ltd. suffers from command execution, which can be exploited by an attacker to gain control of the server...

Denial of Service Vulnerability in CenturyStar Configuration Software (CNVD-2021-35741)

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. is a real-time human-machine interface utility program generator, consisting of the CSMaker development system and CSViewer runtime system, the CSMaker development system is th...

Binary Vulnerability in MapWeb.ocx Control of CenturyStar Configuration Software

Century Star Configuration Software is an obstruction software launched by Beijing Century Changqiu Technology Co., Ltd. is a real-time human-machine interface utility program generator, consisting of the CSMaker development system and CSViewer runtime system, the CSMaker development system is th...

“BadAlloc” – Memory allocation vulnerabilities could affect wide range of IoT and OT devices in industrial, medical, and enterprise networks

Microsoft’s Section 52, the Azure Defender for IoT security research group, recently uncovered a series of critical memory allocation vulnerabilities in IoT and OT devices that adversaries could exploit to bypass security controls in order to execute malicious code or cause a system crash. These...

Anyone For a Smart Network Slice?

As with any standardization effort, development of 5G specifications accounted for numerous technology trends and new use cases...

Unauthorized Access Vulnerability in Website Building System of Beijing Qingliu Technology Co.

Beijing Clearstream Technology Co., Ltd. is China's leading total solution provider of intelligent water services. An unauthorized access vulnerability exists in the website building system of Beijing Qingliu Technology Co. An attacker can exploit the vulnerability to obtain sensitive information...

Sea Cormorant Technology hospital food ordering applet has a flawed logic vulnerability

Guangzhou Hai Cormorant Network Technology Co., Ltd, referred to as: Hai Cormorant Technology, was founded on May 19, 2014, focusing on the healthcare industry, the main business includes the development and operation of intelligent mobile service platforms for WeChat Service Number, Alipay Life...

Unauthorized Access Vulnerability in LinkWorks Collaborative Work Platform of Quanta Software Co.

Quanta Technology Co., Ltd. is a digital construction platform service provider that provides value-added services such as professional applications in the field of construction engineering as the core foundation support and industrial big data and new industrial finance, etc. It is also the firs...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere® Application Server shipped with multiple IBM Rational products based on IBM's Jazz technology (CVE-2015-2017)

Summary IBM WebSphere® Application Server is shipped as a component of the following IBM Rational products: Collaborative Lifecycle Management CLM, Rational Requirements Composer RRC, Rational DOORS Next Generation RDNG, Rational Engineering Lifecycle Manager RELM, Rhapsody Design Manager Rhapsod...

Security Bulletin: Information disclosure vulnerability in WebSphere Application Server Liberty affects multiple IBM Rational products based on IBM Jazz technology

Summary There is an information disclosure due to an XML external entity XXE vulnerability in WebSphere Application Server Liberty bundled with IBM Jazz Team Server based Applications affects multiple products: Collaborative Lifecycle Management CLM, Rational DOORS Next Generation RDNG, Rational...

Security Bulletin: Multiple vulnerabilities in Oracle Outside In Technology affect IBM Rational DOORS Next Generation

Summary IBM Rational DOORS Next Generation® is affected by multiple vulnerabilities in the Oracle Outside In Technology® that is used as a component. Vulnerability Details CVEID: CVE-2019-2610 DESCRIPTION: An unspecified vulnerability in Oracle Fusion Middleware related to the Outside In Technolo...